Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ebd185b7-f7f0-3535-9201-486c504746f2.roa
File:                     ebd185b7-f7f0-3535-9201-486c504746f2.roa (raw, json)
Hash identifier:          VoNM1ub0TH/i3zsMJvrwF7j3kqVVbtYTkHIOWmhz6uc=
Subject key identifier:   7A:CE:FD:47:5F:0C:91:1F:4D:B1:2C:75:86:FC:81:D4:30:BF:D3:FA
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451B7AF05F465E440A0DEF0E00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ebd185b7-f7f0-3535-9201-486c504746f2.roa
Signing time:             Tue 05 Mar 2024 14:00:31 +0000
ROA not before:           Tue 05 Mar 2024 14:00:31 +0000
ROA not after:            Mon 03 Jun 2024 13:00:31 +0000
asID:                     203724
IP address blocks:        161.69.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7a:f0:5f:46:5e:44:0a:0d:ef:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 14:00:31 2024 GMT
            Not After : Jun  3 13:00:31 2024 GMT
        Subject: CN=bdafa79c-50b8-4f52-9635-b80b8d3ab954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:de:8a:50:0b:cf:e4:a2:ef:78:d2:4e:9e:
                    e5:71:be:01:ad:56:04:68:76:d9:ec:55:40:a8:b0:
                    dd:8d:ce:08:04:68:92:ae:ce:32:de:de:c6:a2:44:
                    2e:d6:50:6e:d2:f8:e9:3a:f3:45:8e:6d:22:6b:fe:
                    05:01:5c:68:b6:11:ba:a0:12:b0:89:36:e5:e6:3c:
                    2c:e1:60:db:a8:75:46:6e:6a:e1:52:4c:59:75:4e:
                    20:9c:46:b0:01:4f:cb:c9:f5:04:71:3c:4a:b0:4f:
                    a1:8f:df:31:b8:5f:4f:22:d3:9f:da:1b:63:2b:ff:
                    e4:32:e3:f7:7d:0e:ee:e9:8b:9b:c3:d1:5f:e8:1b:
                    98:b5:79:b1:ae:2f:a0:4e:a0:da:84:3d:d1:fc:c0:
                    97:e2:a2:7a:6c:3f:f4:38:22:3a:90:0e:08:c8:83:
                    1b:55:16:5d:2c:e6:ed:3b:28:e9:ee:bb:39:e8:fc:
                    31:d5:c6:a1:86:14:85:98:61:22:a1:80:dd:ab:98:
                    54:14:31:5d:21:68:0d:c9:6e:66:f6:86:81:6c:19:
                    6d:95:84:a1:af:9c:53:e4:39:84:19:5c:f0:f1:28:
                    5d:d3:3d:ba:90:ce:08:0b:90:d3:50:c6:6f:17:8b:
                    ea:8d:47:da:6b:54:d6:5a:85:9a:17:e5:5c:37:e7:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CE:FD:47:5F:0C:91:1F:4D:B1:2C:75:86:FC:81:D4:30:BF:D3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ebd185b7-f7f0-3535-9201-486c504746f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:06:e3:39:04:4e:4f:c4:54:b6:45:70:7a:c6:4d:ac:bd:0f:
         f0:7a:5d:7f:32:92:7e:d9:ed:93:f0:9e:1d:55:f1:95:38:5b:
         91:94:3a:cc:3e:07:8e:7b:0c:a5:00:9a:1e:ac:e7:84:05:51:
         ea:48:83:8c:77:c4:3d:4b:47:98:db:88:92:95:89:e0:68:6c:
         be:7f:1f:f6:4e:d0:f2:11:4a:9a:c3:34:e4:d1:21:e0:46:be:
         f9:33:19:e4:25:6e:18:a4:b0:e7:ef:ab:0b:45:31:11:08:78:
         92:b1:15:4c:bb:97:ab:75:b3:f6:68:12:8c:af:a7:1a:1d:39:
         1e:2c:fb:16:be:f2:22:1a:ca:ff:0b:14:1c:51:36:60:5e:38:
         47:01:ef:a2:68:01:b7:9d:56:12:4a:a2:7c:9f:05:d6:30:ae:
         4b:81:a1:5b:55:ba:36:e8:c3:de:76:7e:a7:e5:75:7b:01:37:
         81:72:53:f5:df:fc:4b:7b:2f:7f:88:b1:ee:f5:cc:d6:88:63:
         fc:3a:e1:2c:8e:c4:55:46:c7:87:79:c6:66:b2:c4:88:33:3f:
         d4:16:a5:0d:d3:60:cf:b9:5b:f1:b8:92:33:58:fd:79:a8:37:
         5f:78:86:6b:78:04:1e:1f:b4:8b:d9:f6:f8:05:ef:eb:35:9e:
         58:b5:d6:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUbevBfRl5ECg3vDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI0MDMwNTE0MDAzMVoXDTI0MDYwMzEzMDAzMVowLzEtMCsGA1UEAxMk
YmRhZmE3OWMtNTBiOC00ZjUyLTk2MzUtYjgwYjhkM2FiOTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUHeilALz+Si73jSTp7lcb4BrVYEaHbZ7FVA
qLDdjc4IBGiSrs4y3t7GokQu1lBu0vjpOvNFjm0ia/4FAVxothG6oBKwiTbl5jws
4WDbqHVGbmrhUkxZdU4gnEawAU/LyfUEcTxKsE+hj98xuF9PItOf2htjK//kMuP3
fQ7u6Yubw9Ff6BuYtXmxri+gTqDahD3R/MCX4qJ6bD/0OCI6kA4IyIMbVRZdLObt
Oyjp7rs56Pwx1cahhhSFmGEioYDdq5hUFDFdIWgNyW5m9oaBbBltlYShr5xT5DmE
GVzw8Shd0z26kM4IC5DTUMZvF4vqjUfaa1TWWoWaF+VcN+cfbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHrO/UdfDJEfTbEsdYb8gdQwv9P6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZWJkMTg1YjctZjdmMC0z
NTM1LTkyMDEtNDg2YzUwNDc0NmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUULMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwG4zkETk/EVLZFcHrGTay9D/B6XX8ykn7Z7ZPwnh1V8ZU4W5GUOsw+
B457DKUAmh6s54QFUepIg4x3xD1LR5jbiJKVieBobL5/H/ZO0PIRSprDNOTRIeBG
vvkzGeQlbhiksOfvqwtFMREIeJKxFUy7l6t1s/ZoEoyvpxodOR4s+xa+8iIayv8L
FBxRNmBeOEcB76JoAbedVhJKonyfBdYwrkuBoVtVujbow952fqfldXsBN4FyU/Xf
/Et7L3+Ise71zNaIY/w64SyOxFVGx4d5xmayxIgzP9QWpQ3TYM+5W/G4kjNY/Xmo
N194hmt4BB4ftIvZ9vgF7+s1nli11jg=
-----END CERTIFICATE-----
Generated at Sun Apr 28 16:15:38 2024 by rpki-client on console-fra.rpki-client.org